the product object
A plant controller. Identity first. Those five parts are PRAUS.
You do not prompt it. You point a unit at one cloud account, one cluster, and one IdP, arm Identity, and it holds the org chart you meant — standing admin, unused keys, leftover grants — inside a hard envelope that refuses the rest.
Plant
The live systems it is allowed to see and touch. Named. Bounded. Nothing outside the list exists to it.
Setpoint
Desired state: healthy, least-privilege, this version, this blast radius, this budget.
Envelope
Hard limits the model cannot cross — the same idea as flight-envelope protection. Not a system prompt. Not a policy PDF. Code that refuses the actuation.
Actuators
A closed, reversible library: rollback, isolate, drain, rotate, freeze identity, fail over, rebalance, revert the last apply. No open-ended shell.
Black box
Every sense → decide → act → verify cycle is a signed evidence bundle. The tape survives the horse.
and what it is not
Not a harness, SDK, multi-agent OS, or sandbox for someone else's agent. Not a copilot in the IDE. Not a SIEM with a summarize button. Not a runbook runner with an LLM glued on. Not the stables — the horse.
theaters · what a unit may hold
Five certified jobs. Each with its own maneuvers, bridle slice, and promotion path.
Identity
Disable key, revoke session, expire grant. Never attach admin. The first theater we arm.
Capacity
Scale, hibernate, right-size. Companion dollar on the same Shape D glass.
Release
Canary, pause, abort, rollback, pin. Earn after Identity is trusted.
Continuity
Drain, cordon, fail over, rebalance, restart the stuck job.
Exposure
Close, isolate, rotate, unpublish. Unwind required or it does not ship.
A unit with Identity in Observe is a real product. Capacity rides along. All five is cavalry in one theater of war — still not a harness.
v1 · Shape D · Identity armed
An envelope that cannot be talked out of.
- denyCannot delete data stores
- denyCannot widen its own IAM
- denyCannot act outside named resources
- denyEvery actuation has an unwind
- denyRate cap on moves per hour
- denyFreeze to last known good if verify fails
Do not ship "autonomous enterprise." Ship one unit on one theater, and make every move reversible. If it cannot do the loops reversibly, it is not PRAUS yet.
first Identity loops
Key disable
Named IAM key set Inactive, not deleted; unwind re-enables that key.
Expire grant
Named Okta grant ended; unwind restores that grant.
Session revoke
Sessions for a named principal invalidated; unwind re-enables sign-in.
Scale staging
Replicas returned to the weekday lock; unwind restores previous desired.
Release rollback
Previous known-good release restored; unwind re-promotes. Earn later.
the tape
A record a CISO will sign, for every cycle.
evidence/m09a-org-chart # sample
plant aws:1234 · eks/prod · okta/acme
sense standing admin 4 (lock 0)
AKIA…8F2 last used 211d
contractor.jane grant live 14d past end
decide proposal: expire_grant contractor.jane
envelope GRANTED (named resource · unwind present · Observe, so wait)
suggest card waiting · Identity in Observe
killed widen_own_iam · refused
unwind restore named grant
tape sample · demonstration plant